Freedom251 › Dynamic Application Security Testing Software
Astra DAST Scanner
What Astra DAST Scanner is
Astra DAST Scanner is a cloud-based dynamic vulnerability scanner for web applications, APIs, cloud components and user roles. It covers more than 15,000 test cases across OWASP Top 10, ASVS, NIST, SANS, CVEs and issues including XSS, SQLi, IDOR, CSRF and SSRF. Authenticated scanning supports login forms, TOTP-based MFA through custom scripts, static OTPs, test accounts without MFA and manual authentication headers. It scans REST, SOAP and GraphQL APIs with or without authentication and can build an API inventory. Scans can run on a schedule or after deployment; users can configure headers, timeouts and user agents. Named integrations include GitHub Actions, GitLab CI, Jenkins, Bitbucket, Slack and JIRA. Reports export as PDF, CSV or JSON, and fixed vulnerabilities can be rescanned individually. Astra includes remediation guidance and an AI bot for remediation and reproduction questions. Scanner Lite costs $69 a month and includes one target and three scans monthly. Scanner costs $199 a month for one target and unlimited scans; Scanner Agency costs $499 a month for five target slots. A full-week trial costs $7, paid once.
Who it suits
It suits teams scanning web applications and APIs, including authenticated routes and CI/CD workflows. The listed plans distinguish usage by scan volume and target slots.
What it does well
- More than 15,000 vulnerability test cases
- Scans REST, SOAP and GraphQL APIs
- Supports authenticated scanning and MFA options
- Integrates with CI/CD tools, Slack and JIRA
- Exports reports as PDF, CSV or JSON
What to know first
- No free plan
- Scanner Lite allows three scans per month
- Scanner Lite and Scanner each cover one target
- The listed trial costs $7, paid once
Limits
Scanner Lite includes one target, three vulnerability scans per month, and one integration. Scanner includes unlimited scans for one target; Scanner Agency provides a five-target pool, with target changes allowed after a 30-day cooling period.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Scanner | $199/m · 1 target · Unlimited vulnerability scans · Unlimited integrations · Four expert-vetted scans on annual billing | $199 a month |
| Scanner | $1999/yr · 1 target · Unlimited vulnerability scans · Unlimited integrations · Four expert-vetted scans | $1,999 a year |
| Scanner Agency | $499/m · 5-target pool · Unlimited scans · Targets can be changed after a 30-day cooling period · Account manager | $499 a month |
| Scanner Agency | $4999/yr · 5-target pool · Unlimited scans · Targets can be changed after a 30-day cooling period · Account manager | $4,999 a year |
| Scanner Lite | $69/m · 1 target · 3 vulnerability scans/month · 15,000+ tests · Authenticated scans · 1 integration | $69 a month |
| Scanner Lite | $699/yr · 1 target · 3 vulnerability scans/month · 15,000+ tests · Authenticated scans · 1 integration | $699 a year |
| $7 trial | full week · Full platform access · No credit card commitment · Cancel anytime | $7, paid once |
As getastra.com lists them, read 7 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Astra DAST product page.
- Choose a plan or the trial at $7, paid once.
- Add a target; Scanner Lite includes one target.
- Configure authentication or API scanning as needed.
- Connect an available CI/CD integration or configure scan scheduling.
Verdict
Astra DAST combines broad test coverage with authenticated API scanning, scheduling, integrations and reporting. Compare plan target and scan limits with the work you need to cover.
Questions
What does Astra DAST Scanner scan?
It analyzes web applications, APIs, cloud components, and user roles. API coverage includes REST, SOAP, and GraphQL.
How much does it cost?
Scanner Lite starts at $69 a month, billed $69/m. Scanner is $199 a month, and Scanner Agency is $499 a month.
Is there a free plan or trial?
There is no free plan. A trial is listed at $7, paid once, billed for the full week, with no credit card commitment and cancellation anytime.
What are the Scanner Lite limits?
Scanner Lite includes one target, three vulnerability scans per month, and one integration. It also includes authenticated scans and 15,000+ tests.
Can it scan authenticated APIs?
Yes. REST, SOAP, and GraphQL APIs can be scanned with or without authentication. Authenticated scanning supports several login and MFA approaches.
Which integrations are listed?
CI/CD integrations include GitHub Actions, GitLab CI, Jenkins, and Bitbucket. The product also lists Slack alerts and JIRA ticket creation.
Facts from Astra DAST Scanner's own pages
- API scanning
- It scans REST, SOAP, and GraphQL APIs with authenticated or unauthenticated scans and can create an API inventory from DAST scans. · getastra.com, 7 Oct 2026
- Authentication
- Authenticated scanning supports login forms, TOTP-based MFA through custom login scripts, static OTPs, test accounts without MFA, and manual authentication headers. · getastra.com, 7 Oct 2026
- Compliance
- Astra says the scanner identifies vulnerabilities affecting ISO 27001, HIPAA, SOC 2, and GDPR compliance and shows how detected issues affect compliance status. · getastra.com, 7 Oct 2026
- Continuous scanning
- Users can schedule scans at a custom frequency or trigger scans after deployment, and can configure headers, timeouts, and user agents. · getastra.com, 7 Oct 2026
- Coverage
- The scanner includes more than 15,000 test cases covering standards such as OWASP Top 10, ASVS, NIST, and SANS, as well as CVEs and vulnerabilities including XSS, SQLi, IDOR, CSRF, and SSRF. · getastra.com, 7 Oct 2026
- Founded
- 2018 · getastra.com, 28 Sept 2026
- Headquarters
- Claymont, Delaware, USA · getastra.com, 28 Sept 2026
- Integrations
- The product page names GitHub Actions, GitLab CI, Jenkins, and Bitbucket for CI/CD, plus Slack alerts and JIRA ticket creation. · getastra.com, 7 Oct 2026
- Plan limits
- Scanner Lite includes three scans per month for one target and one integration; Scanner includes unlimited scans for one target, while Scanner Agency offers five target slots with a 30-day cooling period. · getastra.com, 7 Oct 2026
- Product
- Astra DAST is a dynamic vulnerability scanner that analyzes web applications, APIs, cloud components, and user roles. · getastra.com, 7 Oct 2026
- Remediation
- The scanner can rescan fixed vulnerabilities individually and provides remediation guidance with an integrated AI bot for remediation and reproduction questions. · getastra.com, 7 Oct 2026
- Reporting
- Reports for engineering, management, and external stakeholders can be exported as PDF, CSV, or JSON. · getastra.com, 7 Oct 2026
- Scan safety
- Astra says its DAST scanner does not perform stress testing that could cause denial of service and lets users control crawl and scan frequency. · getastra.com, 7 Oct 2026
- Trust Center
- The product includes a shareable Trust Center that can show security posture, compliance, pentest, and vulnerability data. · getastra.com, 7 Oct 2026